6 papers
Generating Proof-of-Vulnerability Tests to Help Enhance the Security of Complex Software
Shravya Kanchi, Xiaoyan Zang, Ying Zhang +2
Developers create modern software applications (Apps) on top of third-party libraries (Libs). When library vulnerabilities are reachable through application code, the applications…
How Can ChatGPT Support Human Security Testers to Help Mitigate Supply Chain Attacks?
Ying Zhang, Wenjia Song, Zhengjie Ji +3
Developers often build software on top of third-party libraries (Libs) to improve productivity, but these libraries may contain vulnerabilities that enable supply chain attacks. Ex…
Combining Example-Based and Rule-Based Program Transformations to Resolve Build Conflicts
Sheikh Shadab Towqir, Fei He, Todd Mytkowicz +1
Merge conflicts often arise when developers integrate changes from different software branches. The conflicts can result from overlapping edits in programs (i.e., textual conflicts…
Detecting Metadata-Related Bugs in Enterprise Applications
Md Mahir Asef Kabir, Xiaoyin Wang, Na Meng
When building enterprise applications (EAs) on Java frameworks (e.g., Spring), developers often configure application components via metadata (i.e., Java annotations and XML files)…
An Exploratory Study on Build Issue Resolution Among Computer Science Students
Sunzhou Huang, Na Meng, Xueqing Liu +1
When Computer Science (CS) students try to use or extend open-source software (OSS) projects, they often encounter the common challenge of OSS failing to build on their local machi…
Crypto-Ransomware and Their Defenses: In-depth Behavioral Characterization, Discussion of Deployability, and New Insights
Wenjia Song, Sanjula Karanam, Ya Xiao +6
Crypto-ransomware has caused an unprecedented scope of impact in recent years with an evolving level of sophistication. An extensive range of studies have been on defending against…